【求助】可以由MAC查到該網卡現正使用的IP嗎

[rickwen]

請問各位大大,
可否由網卡的MAC查到該網卡現正使用的IP嗎?
謝謝.

[aiken]

從 DHCP Server 上面看

[rickwen]

從 DHCP Server 上面看

這樣阿,
那如果該台PC不是使用DHCP而是設定固定IP的話,
在DHCP上不就看不到了嗎?

sorry....我是新手,
比較不懂這些,
如有講錯或誤解的話請多指教包含喔,
謝謝!!

[timas]

去找RARP的工具
由MAC查IP的協定工具

[wangcm]

去找RARP的工具
由MAC查IP的協定工具

RARP應該是給diskless workstation取得IP的工具吧(類似BOOTP/DHCP,或可說RARP是BOOTP/DHCP的前身)?? 要server上有MAC/IP的表才能依MAC address提供其該使用的IP address,而不是某個MAC address的機器在收到帶其MAC address的RARP request就會自動回應其IP address的 ....

[timas]

RARP應該是給diskless workstation取得IP的工具吧(類似BOOTP/DHCP,或可說RARP是BOOTP/DHCP的前身)?? 要server上有MAC/IP的表才能依MAC address提供其該使用的IP address,而不是某個MAC address的機器在收到帶其MAC address的RARP request就會自動回應其IP address的 ....

你這是自己想的吧！！
你去試試linux裡頭有個arping的東西 也許你會有新發現

[wangcm]

你這是自己想的吧！！
你去試試linux裡頭有個arping的東西 也許你會有新發現

如果是這樣您更該好好看看arping的README了 ....就在README最後一段Technical中寫著....

Technical
---------
Yes, I've finally bothered to write how it works.
tcpdumps were taken with "tcpdump -vven 'arp or icmp'".

The source box is 192.168.0.2/0:10:5a:3e:c5:b4 and the target box is
192.168.0.1/0:60:93:34:91:99.

For pinging IP addresses:
When a host wants to send an IP packet to another host, it sends out an ARP
packet asking what MAC the destination IP address has, a so-called 'who-has'
packet. This is then answered by another ARP packet, the 'is-at' packet.

18:16:07.179699 0:10:5a:3e:c5:b4 ff:ff:ff:ff:ff:ff 0806 42:
arp who-has 192.168.0.1 tell 192.168.0.2

This is the packet generated by arping.
An Ethernet frame from my 3com card to the broadcast address carrying an arp
packet asking what MAC 192.168.0.1 has (who-has).

18:16:07.180221 0:60:93:34:91:99 0:10:5a:3e:c5:b4 0806 60:
arp reply 192.168.0.1 is-at 0:60:93:34:91:99

The answer, that 192.168.0.1 has MAC 0:60:93:34:91:99 (is-at).

For pinging MAC addresses:
A broadcast ping (255.255.255.255, or any address supplied with -T, see below)
is sent out on the Ethernet, but in an Ethernet frame addressed to the target
MAC only.

18:20:09.627321 0:10:5a:3e:c5:b4 0:60:93:34:91:99 0800 42:
192.168.0.2 > 255.255.255.255: icmp: echo request
(ttl 48, id 17767, len 28)

This is the packet generated by arping.
Ethernet frame from my 3com NIC to the destination MAC, carrying a broadcast
ping.

18:20:09.628432 0:60:93:34:91:99 0:10:5a:3e:c5:b4 0800 60:
192.168.0.1 > 192.168.0.2: icmp: echo reply
(ttl 255, id 7593, len 28)

The answer, including the source address of the target host. Note that this
is not how every OS responds to a broadcast ping (if at all). Some answer with
a source address equal to the broadcast address, and others don't' answer at
all.
-----

事實上其README中從頭到尾都沒出現RARP這個字眼 ....arping其實是利用送ICMP echo request到IP broadcast address(不過MAC address是填known destination address,而非ethernet broadcast address ),可說是ICMP ping的變形吧 .....

[timas]

寫著 Reverse ARP的是這個文件
http://www.habets.pp.se/synscan/docs...arp-draft1.pdf
2.2 Reverse ARP ping.
不過 我確實只看了標題 還有範例 倒是沒有去看內容
真是不好意思啊

[wangcm]

寫著 Reverse ARP的是這個文件
http://www.habets.pp.se/synscan/docs...arp-draft1.pdf
2.2 Reverse ARP ping.

snipped....

您提的PDF正是arping作者對arping工作原理的描述,而作者在文件的最前面也強調這只是他個人的實驗("Playing with ARP-DRAFT 1,I repeat,It's a draft"),並不是公定的標準(Internet上公認的RARP正是在PDF中2.2節所提的RFC903,您不妨用google找找 ),雖然RARP字面上很容易讓人有其是與ARP互補的protocol的錯覺,但RARP實際上並不是與ARP互補的protocol(這應該就是arping的作者為何要寫arping出來的原因吧 ),至於RFC903所指的RARP(BTW,PDF中也提到In the real world,RARP is rarely used.)為何要叫作RARP,畢竟Internet是美國人所創造出來的,吾等也只能尊守其遊戲規則吧 ....

[wepin]

如果是在區域網路的話,沒有MAC也有很多軟體能列出現有的所有電腦IP和MAC等資料吧!
例如:NetLimiter